windows update site - block part of it?

[john]

Is there a way to block a part of the Windows Update
site? I dont want my users to be able to see or download
the Driver updates. Critical Updates and Other Downloads
I still want to be visible. Is it possible to do this?

[Thorsten Matzner]

"john" > wrote:

>Is there a way to block a part of the Windows Update
>site? I dont want my users to be able to see or download
>the Driver updates. Critical Updates and Other Downloads
>I still want to be visible. Is it possible to do this?

While you can customize the Windows Update site te settings are not
protected so that the users can change them.
Better: distribute the updates manually by downloading them from the
WU Catalog.
"How to Download Windows Updates and Drivers from the Windows Update
Catalog on Windows XP" (http://support.microsoft.com/?kbid=323166)

--
(tm)

[Dan DeStefano]

the best way to prevent users from downloading and installing windows
updates (or any other software, for that matter) is to not allow them to log
onto the machine with an administrator account. not only that, but nobody,
including administrators themselves, should log onto any windows nt/2k/xp
machine as administrator as this is a huge security vulnerability. one major
example is that most vulnerabilities and viruses execute under the security
context of the currently logged-on credentials. so, if a user in the 'users'
group (restricted user) contracts a virus, the damage that can be done is
limited due to the decreased privileges. the administrator account should
only be used to log on when needed to perform administrative tasks, such as
changing system settings, updating drivers, updating os, and should not be
used for normal day-to-day tasks such as web browsing, email. also, one may
use the 'runas' command to run programs as an account with administrator
privileges without actually having to log on as administrator. this is a
standard security 'best practice' and one i believe is quite important.

Dan DeStefano


"john" > wrote in message
...
> Is there a way to block a part of the Windows Update
> site? I dont want my users to be able to see or download
> the Driver updates. Critical Updates and Other Downloads
> I still want to be visible. Is it possible to do this?

[Kenny]

XP AntiSpy!
http://www.webattack.com/get/xpantispy.shtml

--
Kenny
"john" > wrote in message
...
> Is there a way to block a part of the Windows Update
> site? I dont want my users to be able to see or download
> the Driver updates. Critical Updates and Other Downloads
> I still want to be visible. Is it possible to do this?